cpython/Lib/http
Gregory P. Smith 4abab6b603
gh-87389: Fix an open redirection vulnerability in http.server. (#93879)
Fix an open redirection vulnerability in the `http.server` module when
an URI path starts with `//` that could produce a 301 Location header
with a misleading target.  Vulnerability discovered, and logic fix
proposed, by Hamza Avvan (@hamzaavvan).

Test and comments authored by Gregory P. Smith [Google].
2022-06-21 13:16:57 -07:00
..
__init__.py gh-91996: Add an HTTPMethod StrEnum to http (GH-91997) 2022-05-05 15:39:02 -07:00
client.py
cookiejar.py gh-79096: Protect cookie file created by {LWP,Mozilla}CookieJar.save() (GH-93463) 2022-06-07 10:11:03 +02:00
cookies.py
server.py gh-87389: Fix an open redirection vulnerability in http.server. (#93879) 2022-06-21 13:16:57 -07:00